I ran a poll about doing Halloween vs Black Friday and was reminded by a few of my mates that I'm Scottish not American(quite rightly so pulled up on it too!) therefore going with Halloween theme. Which is good news for everyone anyways, as 13.37% discount is live as of today till end of November: GUISING1337 - 13.37% off because Leet malwareless.training lms.zsec.red A bit of info for some that might not be aware but the traditional 'trick or treat' terminology many associate with halloween is actually called guising in Scotland. As a child I'd go round guising on halloween, unlike modern trick-or-treating where children receive sweets just for showing up to people's houses, by going guising you are traditionally expected to perform a "party piece", think of this like your 'trick' such as telling a joke, singing a song, or reciting a poem before receiving treats like fruit, nuts, or sweets. All this to say, here have 13.37% off the course till end of November! Cheers, Andy #RedTeam #BlueTeam #PurpleTeam #MAE #ZephrSec @ZephrSec

Here's some of the research I've done into AI and LLMs over the past year: blog.zsec.uk/bullyingllms/ - Building MCPs blog.zsec.uk/harnessing-harn… - What makes up a harness blog.zsec.uk/ai-assisted-dev… - Building tooling #infosec #llm #vulnerabilityresearch #MCP #harness

Someone reminded me the other day I'm speaking at @Hack_Thursday this month (Thursday 15th Oct!) ! It won't be recorded as it's a small event but I'll be talking about Blending into the Noise: Baselining windows to blend in, looking at windows telemetry from a red team perspective and all the fun that follows. Come along it'll be fun :)

Yet another blog post, sticking to a cadence of 1 per month roughly blog.zsec.uk/claude-tips/

Tomorrow is the day @Hack_Glasgow where I'll be speaking alongside @CaptainDjent about red and blue perspectives on adversarial patterns, if you're in Glasgow area and fancy coming along I believe there are still tickets avail! hackglasgow.live Also as has become a bit of a theme with UK cons, HackGlasgow are collecting for charity which is great, if you've got a few quid spare you should totally throw it at: justgiving.com/page/hack-gla… Also @ZephrSec is sponsoring too, I'll probably have stickers if folks want them! #HackGlasgow #HackThursday #RedTeam #BlueTeam #PurpleTeam

A week off so far and a few days to go left of PTO, can mean only one thing... ...blog post and research time! Here's a post and tool I've had in drafts for a while and not had a chance to finish, blog.zsec.uk/brokerline-pubs… BrokerLine is essentially a PoC using Azure's PubSub service for C2 and demonstrating how it's possible todo (bonus points the header image is from my first week of PTO as I spent last weekend at Tomorrowland)! #RedTeam #SecurityResearch #BlueTeam #ProofOfConcept

I've not done any deep dives on bugs in a while so here's a walkthrough of where the #wp2shell bug exists in code, constructing a PoC and highlighting the signs to search for if you're seeing exploitation in the wild. blog.zsec.uk/wp2shell-code-t… #blueteam #vulnerabilityresearch